Staff Software Engineer - Security
Flowengineering · San Francisco
About this role
## About Flow Flow Engineering is an AI-native requirements platform for modern engineering organizations—helping hardware teams collaborate with AI agents to design, validate, and evolve complex systems with speed and rigor. ## About the Role Our customers in defense, aerospace, and more trust us with sensitive systems requirements. Security is a first-order part of the product, and we’re looking for a **Staff Software Engineer (Security)** to own it. This is our first dedicated security hire. You’ll define the security architecture, harden the platform, and build out the compliance posture. Since LLMs and agentic workflows are central to what we do, you’ll also lead how we secure them. ## What You’ll Do - **Own security architecture across the platform**: threat modeling, secure design reviews, and the standards we build against. - **Harden the full stack**: application security and cloud infrastructure (identity, network, secrets), tenant isolation, and data protection. - **Drive SOC 2** and prepare for certifications defense and aerospace customers ask about, including **export control** and **ITAR**. - **Secure our AI and agentic systems**: prompt injection, data leaking through models, what actions agents are allowed to take, and guardrails. - **Build security tooling** across detection, monitoring, vulnerability management, and CI/CD. - **Stand up incident response** and run it end-to-end, from detection through postmortems. - **Partner with sales and product** to pass security reviews and build customer confidence. ## About You - **8+ years** building production software, including running secure services at scale in the cloud. - Deep experience in **application and cloud security** (AWS, GCP, or Azure): identity & access, secrets, network security, data protection. - Experience owning security in a **regulated or high-trust environment**, including implementing **SOC 2**. - **Export control, ITAR, or FedRAMP** experience is a plus. - Strong fundamentals in **threat modeling, secure architecture, and incident response**. - You’ve secured **AI/LLM systems**. - Comfortable being the security lead at a startup—setting the agenda yourself. ## Our Stack (AI-Leaning) - TypeScript/Node.js and Python for AI and backend services - Modern LLM APIs and orchestration libraries for agentic workflows - Postgres and other managed cloud services for data and state ## How We Work & Values - **Speed over everything**: prototype AI workflows quickly, then harden what works. - **Own, downscope, ship, iterate**: one clear owner per feature—from prototype to production. - **Fundamentals done well**: evaluation, observability, and safety are part of the first version, not an afterthought. ## Benefits - Competitive salary and meaningful equity - Health, dental, and vision coverage - Flexible time off and support for experimentation, learning, and staying current with the AI ecosystem
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.